Open Source Cost of Remediation

Cost assumptions · edit any of them and every dollar figure on this page is recalculated

Severity × Effort to Fix (click a cell to list those vulnerabilities)

Each row is a published severity; each column is the engineer-days a fix takes, most effort on the left. A cell shows how many vulnerabilities fall there and their share of the row; darker means a larger share. Outlined: critical and high vulnerabilities that are low or medium effort to fix.

Key Findings

How Concentrated the Cost Is

Severity and Cost (click to filter)

Vulnerability Class Distribution

Top 10 Vulnerability Classes (click a bar to filter records)

Language Comparison

Top 10 Languages (click a bar to filter records)

Module Layer & Architecture

Average Cost by Module Layer (click to filter)

Records by Stack Side (click to filter)

Architecture & Deployment (project-level attributes — the unit here is projects, not records)

Attribute	Value	Projects	Records	Total Cost	Avg Cost/Vuln

Difficulty Distribution

Records by Difficulty Bucket (click to filter)

Total Cost by Difficulty Bucket (click to filter)

Cost Breakdown by Project

Top 10 Projects by Total Cost (click a bar to filter records)

Project Details (same ranking; click a heading to rank by it)

Project ▲	Records ▲	Total Hours ▲	Total Cost ▲	Avg Cost/Vuln ▲	Top Vuln Class ▲

Record Explorer

Record ID ▲	Project ▲	Severity ▲	Vuln Class ▲	Score ▲	Bucket ▲	Hours ▲	Cost ▲	Basis ▲